security security 'shockingly bad' say computer experts

Tuesday, January 28, 2014 by: J. D. Heyes
Tags:, website security, computer experts

eTrust Pro Certified

Most Viewed Articles
Popular on Facebook
BACK INTO THE CLOSET: Why U.S. reporters are not allowed to write about rainbow events in nations where being gay is still condemned
Depopulation test run? 75% of children who received vaccines in Mexican town now dead or hospitalized
A family destroyed: Six-month-old dies after clinic injects baby with 13 vaccines at once without mother's informed consent
Biologist explains how marijuana causes tumor cells to commit suicide
INVESTIGATION: Three days before Dr. Bradstreet was found dead in a river, U.S. govt. agents raided his research facility to seize a breakthrough cancer treatment called GcMAF
BOMBSHELL: China and America already at war: Tianjin explosion carried out by Pentagon space weapon in retaliation for Yuan currency devaluation... Military helicopters now patrolling Beijing
Companies begin planting microchips under employees' skin
BAM! Chipotle goes 100% non-GMO; flatly rejecting the biotech industry and its toxic food ingredients
Chemotherapy kills cancer patients faster than no treatment at all
ECONOMIC SLAVERY FOR ALL: While we were distracted with the Confederate flag flap, Congress quietly forfeited our entire economic future via fast-track trade authority
NJ cops bust teenagers shoveling snow without a permit
McDonald's in global profit free fall as people everywhere increasingly reject chemically-altered toxic fast food
March Against Monsanto explodes globally... World citizens stage massive protests across 38 countries, 428 cities... mainstream media pretends it never happened
Italian court rules mercury and aluminum in vaccines cause autism: US media continues total blackout of medical truth
SCOTUS same-sex marriage decision may have just legalized the concealed carry of loaded firearms across all 50 states, nullifying gun laws everywhere
Orthorexia Nervosa - New mental disorder aimed at people who insist on eating a clean diet
Vicious attack on Dr. Oz actually waged by biotech mafia; plot to destroy Oz launched after episode on glyphosate toxicity went viral
Nearly every mass shooting in the last 20 years shares one surprising thing? and it's not guns
(NaturalNews) The federal government had years to design it, build it and test it. They had the full backing of the U.S. Treasury, compliments of the (dwindling) American taxpayer. And still, Washington bureaucrats couldn't make it work.

A government that mobilized 16 million during World War II, built hundreds of warships, tens of thousands of tanks and aircraft, developed the atomic bomb and, later, built the U.S. Interstate System and put men in space - has been unable, in 2014, to design and launch a functional website.

That's the sad story of Uncle Sam and his online Obamacare health insurance exchange, Worse, say experts who have repeatedly examined the site, the security for it is "shockingly bad."

As reported by NBC News:

Cybersecurity researchers slammed's security during a House hearing [recently], saying the site is still riddled with problems that could put consumers' sensitive health details at risk.

"The reason we're concluding that this is so shockingly bad is that the issues across the site are so varied," David Kennedy, founder of the information security firm TrustedSec, told NBC News. "You don't even have to hack into the system to see big issues - which means there are [major problems] underneath."

Critics of Kennedy have said his conclusions are politically motivated, because he was brought in by Republicans in the House who are opposed to Obamacare. But he maintains that that isn't the case; his job, regardless of who asks him to do it, is to test the security of government sites.

'Nothing's really changed'

He's one of a group of "white-hat hackers" - hacking experts who try to break into government and corporate websites, not to steal or cause havoc, but to find security flaws so they can be fixed. And, Kennedy has said repeatedly (last fall after's abysmal launch and again just recently) that the site just isn't secure.

"Nothing's really changed since our November 19 testimony," Kennedy said during a recent House hearing. "In fact, it's worse."

In November, Kennedy identified 18 serious issues with the site. Now, weeks later, only half of one of those 18 issues has been fixed, he said. Not only that, but since then he has also found additional problems with the site:

A separate House Oversight committee hearing held [last week] included testimony from government officials including Teresa Fryer, the chief information officer of the Centers for Medicare and Medicare Services (CMS), which manages

According to Fryer, passed a "security control assessment" on December 18 with "no open high findings." But she and the other officials faced a grilling from the panel about why more tests were not completed earlier, and why warnings about the site's launch were not heeded.

There are still some critical problems

During the Science Committee hearing, Kennedy said he would not disclose specifics about the vulnerabilities, because they are active issues that hackers could ultimately uncover and exploit. However, he did identify issues like the disclosure of user profiles, as well as the ability to access eligibility reports without proper identification.

"Some issues still include critical or high-risk findings to personal information," Kennedy said in his written testimony. In addition, the expert also submitted statements into the record from seven other security researchers who expressed serious concerns.

The CMS has since released a separate statement, in response to Kennedy's testimony, insisting that the agency took any and all security concerns seriously and that it has a "robust system in place" to address any security issues.

"To date, there have been no successful security attacks on and no person or group has maliciously accessed personally identifiable information from the site," the CMS said in the statement. The agency also said it continually conducts security testing on the site.

But many lawmakers remained unconvinced. And other experts, like Michael Gregg, CEO of the security consulting firm Superior Solutions, suggested that the government simply rolled out too quickly - before adequate product testing could be completed.

"Hacking today is big business," Gregg told the Science Committee.


Follow real-time breaking news headlines on at
Join over four million monthly readers. Your privacy is protected. Unsubscribe at any time.
comments powered by Disqus
Take Action: Support by linking back to this article from your website

Permalink to this article:

Embed article link: (copy HTML code below):

Reprinting this article:
Non-commercial use OK, cite with clickable link.

Follow Natural News on Facebook, Twitter, Google Plus, and Pinterest

Colloidal Silver

Advertise with NaturalNews...

Support NaturalNews Sponsors:

Advertise with NaturalNews...


Sign up for the FREE Natural News Email Newsletter

Receive breaking news on GMOs, vaccines, fluoride, radiation protection, natural cures, food safety alerts and interviews with the world's top experts on natural health and more.

Join over 7 million monthly readers of, the internet's No. 1 natural health news site. (Source:

Your email address *

Please enter the code you see above*

No Thanks

Already have it and love it!

Natural News supports and helps fund these organizations:

* Required. Once you click submit, we will send you an email asking you to confirm your free registration. Your privacy is assured and your information is kept confidential. You may unsubscribe at anytime.